topic IDSM-2 bypass for specific hosts - by the CLI in Network Security

IDSM-2 bypass for specific hosts - by the CLI

Fernando_Meza — Sun, 10 Mar 2019 12:41:15 GMT

Hi Netpros,

I have a situation where I need to bypass any inspection between two hosts. I currenlty have the IDSM-2 performing in-line VLAN pair. From reasons I can't currently detail I don't have access to the web interface and therefore need to perform this from the command line. Basically any comunication from host A ->to host B and from host B-> to host A needs NOT to be inspected at all as traffic traverses the IDSM-2. Your assistance would be much appreciated.

Also, is there any way to clear the mac address table from the IDMS-2 using the CLI ?

IDSM-2 bypass for specific hosts - by the CLI

Todd Pula — Fri, 25 May 2012 22:00:24 GMT

There is no way to configure the IDSM to accomplish this in an inline fashion. In a promiscuous configuration, you could use a VACL to specify what specific traffic should be redirected to the module. There is an open feature enhancement for this.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn71977

Re: IDSM-2 bypass for specific hosts - by the CLI

Fernando_Meza — Tue, 29 May 2012 12:37:48 GMT

Thanks

Sent from Cisco Technical Support iPad App